|
Search Results
|
| Post |
Author |
Forum
[asc]
|
Replies |
Views |
Posted |
| |
|
Thread: Ransomware
Post: RE: Ransomware
| Did you also check https://www.nomoreransom.org/ ; they have a couple of solutions; maybe you're lucky |
|
Karamba |
hashcat
|
13 |
7,570 |
12-14-2018, 11:38 AM |
| |
|
Thread: Ransomware
Post: RE: Ransomware
| It seems that JtR has it under construction.
https://github.com/magnumripper/JohnTheRipper/pull/3531 |
|
Karamba |
hashcat
|
13 |
7,570 |
12-21-2018, 08:42 AM |
| |
|
Thread: -m 16700 Filevault
Post: RE: -m 16700 Filevault
| Little update:
-m 16700 works also for Filevault on latest APFS filesystem, but only on macOS High Sierra (10.13)
Simply follow the guide of this fork (https://github.com/kholia/apfs2john) in orde... |
|
Karamba |
hashcat
|
8 |
7,705 |
12-21-2018, 02:54 PM |
| |
|
Thread: -m 16700 Filevault
Post: RE: -m 16700 Filevault
| mmls and others are part of the Sleuthkit; it can easily be installed on a mac via brew
if you have the drive physically attached, why not simply search with diskutil list for the RecoveryHD and mo... |
|
Karamba |
hashcat
|
8 |
7,705 |
12-26-2018, 07:14 PM |
| |
|
Thread: nOOb help
Post: RE: nOOb help
| The hash you want to crack is stored in the [USER].plist file. You can find it in this path: /var/db/dslocal/nodes/Default/users/
Run this script (https://gist.github.com/nueh/8252572) to extract t... |
|
Karamba |
hashcat
|
12 |
8,104 |
01-04-2019, 04:34 PM |
| |
|
Thread: Help needed cracking a Mac password
Post: RE: Help needed cracking a Mac password
| The exact same problem and solution are explained here.
https://hashcat.net/forum/thread-7792.html
The plist2hashcat is a script, so you need to run it. Do some research how. You'll learn a lot. ;... |
|
Karamba |
hashcat
|
3 |
4,027 |
01-07-2019, 12:18 PM |
| |
|
Thread: nOOb help
Post: RE: nOOb help
| No.
You need to execute the script which is written in python. (you can simply download it from the link that I posted)
You can run the script in Windows, Win Subsystem for Linux or any other Linu... |
|
Karamba |
hashcat
|
12 |
8,104 |
01-07-2019, 12:32 PM |
| |
|
Thread: Running maskprocessor on Mac
Post: RE: Running maskprocessor on Mac
| You have a wordlist to try and some rules. Easy.
Did you read the --help ?
At the bottom, you'll find 'Basic Examples'. Example 2 talks about wordlist + rules.
I am sure you can figure out now... |
|
Karamba |
hashcat
|
8 |
5,376 |
01-07-2019, 09:36 PM |
| |
|
Thread: Running maskprocessor on Mac
Post: RE: Running maskprocessor on Mac
| As you can read here https://hashcat.net/wiki/, next to rule-based-attack, you'll see that rules only apply for attack 0, 6 an 7. |
|
Karamba |
hashcat
|
8 |
5,376 |
01-08-2019, 08:11 AM |
| |
|
Thread: Help with Mask
Post: RE: Help with Mask
| https://hashcat.net/wiki/doku.php?id=mask_attack#hashcat_mask_files is a way to do it
(fifth thread that you open on this forum for your challenge) |
|
Karamba |
hashcat
|
1 |
1,302 |
01-11-2019, 04:51 PM |
| |
|
Thread: -m 18300 APFS
Post: -m 18300 APFS
| As you could read in this post (https://hashcat.net/forum/thread-7620-post-43185.html) I explained a walk-through for extracting the FileVault hash.
I also explained that this method wasn't working a... |
|
Karamba |
hashcat
|
9 |
3,940 |
05-01-2019, 05:47 PM |
| |
|
Thread: Mac OSX Mojave .plist format conversion
Post: RE: Mac OSX Mojave .plist format conversion
| Can you elaborate on what you are trying to do?
The file AdminUserRecoveryInfo.plist is found in /Volumes/Preboot/[UUID]/var/db, and it's not the correct file in order to extract the login-hash.
T... |
|
Karamba |
hashcat
|
9 |
4,500 |
06-03-2019, 04:27 PM |
| |
|
Thread: Mac OSX Mojave .plist format conversion
Post: RE: Mac OSX Mojave .plist format conversion
| I am confused by your explanation, culdesac. Would it be possible that you are mixing things up?
I have macOS 10.14.5 installed and the known technique to recover the user-hash is perfectly working. Y... |
|
Karamba |
hashcat
|
9 |
4,500 |
06-14-2019, 11:30 PM |
| |
|
Thread: Mac OSX Mojave .plist format conversion
Post: RE: Mac OSX Mojave .plist format conversion
| I think I understand what you mean know.
You need to crack the Filevault2 encryption first. See this post. (https://hashcat.net/forum/thread-8338.html)
Once you got it, you can mount the Macintosh... |
|
Karamba |
hashcat
|
9 |
4,500 |
06-18-2019, 09:22 AM |
| |
|
Thread: Mac OSX Mojave .plist format conversion
Post: RE: Mac OSX Mojave .plist format conversion
|
laxstor Wrote: (06-25-2019, 08:29 PM)
--
culdesac I was just wondering this myself.. no way for me to get the plist via /var/db/... as that returns not permitted or permission denied.
--
Work with s... |
|
Karamba |
hashcat
|
9 |
4,500 |
06-25-2019, 09:28 PM |
| |
|
Thread: How to find the password for a hidden partition of a single TrueCrypt file?
Post: RE: How to find the password for a hidden partitio...
|
mkcon Wrote: (07-17-2019, 12:39 PM)
--
as mentioned in your quoted URL you need the sector following the first 65536 bytes of the file, i.e. you need the 128th sector. Thus skip sector 0 to 127 and ... |
|
Karamba |
hashcat
|
6 |
2,674 |
07-19-2019, 11:33 AM |
| |
|
Thread: how to crack a windows 10 local user password hash(Netnlm capture)
Post: RE: how to crack a windows 10 local user password ...
| hashcat.exe --help
or literally the first result:
https://www.google.com/search?q=hashcat+help
please try harder 🤨 |
|
Karamba |
hashcat
|
14 |
4,711 |
08-12-2019, 09:39 PM |
| |
|
Thread: How to use rules.
Post: RE: How to use rules.
|
Rdgeno Wrote: (08-28-2019, 12:12 AM)
--
[...] I'm typing in -m 2500 -r rules/best.64.rule [...] I keep getting in red rules/best64.rule: No such file or directory. [...]
--
Typo maybe?
Be sure that ... |
|
Karamba |
hashcat
|
2 |
1,191 |
08-28-2019, 07:18 AM |
| |
|
Thread: Veracrypt password help
Post: RE: Veracrypt password help
| - Did you make an encrypted container (just a file), or an encrypted partition/drive?
- Did you make it standard or hidden?
- What encryption algorithms did you use? (default = AES) What hash algori... |
|
Karamba |
hashcat
|
4 |
2,291 |
07-18-2019, 04:41 PM |
| |
|
Thread: Veracrypt password help
Post: RE: Veracrypt password help
|
emmalove Wrote: (07-18-2019, 09:25 PM)
--
- Did you make an encrypted container (just a file), or an encrypted partition/drive? An encrypted partition/drive.
- Did you make it standard or hidden? ... |
|
Karamba |
hashcat
|
4 |
2,291 |
07-19-2019, 11:24 AM |
